SKRYBER//AI

Privacy Policy

Last updated: October 19, 2026

This Privacy Policy explains how Multitude Media, LLC, doing business as "Skryber" ("Skryber", "we", "us"), collects, uses, shares, and protects your information when you use Skryber, our AI video-editing and transcription service at www.skryber.com. By using the Service you agree to this policy.

1. Information We Collect

  • Account information — name, email address, and authentication details.
  • Content you upload or link — videos, audio, images, and any URLs (e.g. YouTube/social links) you provide for processing, plus the transcripts, captions, clips, and thumbnails we generate from them.
  • Voice content — when you use AI voice-over / dubbing, the text and audio sent to our voice provider.
  • Payment information — handled directly by Stripe; we store only your subscription status, plan, and credit balance, never full card numbers.
  • Whop campaign data (optional) — if you connect a Whop account: your Whop user ID, username, and email as returned by Whop; OAuth access and refresh tokens (stored encrypted at rest); the campaigns visible to your account and your activity on them within Skryber; the published post URLs and optional notes you record as campaign evidence; and records of submissions you assemble and send through Skryber (the links, caption, timestamps of your review and confirmation, and Whop's response). We collect this only when you connect Whop, and only under the permissions shown on Whop's consent screen. Each submission you send is transmitted only after your explicit confirmation, which we log.
  • Connected social accounts (optional) — if you connect Facebook, Instagram, Threads, YouTube, TikTok, X, LinkedIn, Bluesky, Mastodon, Twitch or Kick: OAuth tokens, account ids, names, handles and profile pictures, the ids, links and metrics of the posts Skryber publishes for you, and for Twitch the list of your channel's videos. See §4b.
  • Usage & device data — feature usage, log data, IP address, approximate location (city/region/country derived from your IP), and (with your consent) analytics. We retain your most recent IP and approximate location for account security and administration.
  • How you found Skryber — the campaign tags, which ad-click parameters were present (their names only, such as gclid), the referring website (its domain only), the landing page and the time of your first visit, stored with your account so we can measure which channels work. If you decline analytics cookies we keep none of this, except that a personal Skryber invite link is matched to its invite so its offer can be honored. A partner (affiliate) referral link is credited to that partner whatever your cookie choice.

2. How We Use Your Information

  • To provide and operate the Service — transcribe, analyze, edit, render, and deliver your videos and clips.
  • To process payments, manage your subscription, and enforce usage/credit limits.
  • To send you service and support messages.
  • To secure the Service, prevent abuse, and apply rate limits.
  • To show you campaigns from your own Whop feed, assemble the submissions you review, transmit them to Whop only after your explicit confirmation, and keep an auditable record of what was sent and when.
  • To improve the Service (analytics, only where you have consented).

2b. Our Legal Bases for Processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data only where a lawful basis under Article 6 of the GDPR applies:

  • Performance of a contract — to create and run your account and to deliver the features you ask for: uploading and storing your videos, transcription, clip generation, Video Cleanup, exports, scheduling and publishing.
  • Legitimate interests — to keep the Service secure and available, prevent fraud and abuse, enforce usage limits, meter consumption for billing accuracy, debug failures, and improve reliability. We balance these against your rights, and you may object at any time (see §8).
  • Consent — for optional analytics and marketing cookies, and for optional integrations you connect (such as social accounts, Google Drive or Whop). You can withdraw consent at any time without affecting the lawfulness of processing already carried out.
  • Legal obligation — to keep tax, accounting and payment records, and to respond to lawful requests.

We do not use your videos, audio or transcripts to train our own models, and our AI providers are contractually restricted to processing your content only to deliver the feature you requested.

3. Service Providers We Share Data With

We do not sell your personal information. To run the Service we share the minimum necessary data with the processors below, each under their own privacy terms. Your video and transcript content is sent to AI providers only to perform the feature you requested.

  • Supabase — database, file storage, and authentication.
  • Vercel — application hosting and serverless processing.
  • Railway / Upstash — background video processing and rate-limiting.
  • Deepgram — speech-to-text transcription of your audio/video.
  • OpenAI and Anthropic — AI analysis of transcripts to select viral moments and generate titles/captions.
  • ElevenLabs — AI voice-over and dubbing generation.
  • Replicate, Black Forest Labs and fal — AI image, thumbnail, B-roll and music generation.
  • Google (Gemini and Veo) — AI vision analysis of video frames, narration scripts and AI video clips.
  • Runway — AI background replacement (Studio Swap) on the clips you choose.
  • DeepSeek — AI writing for Promo Studio from the website you enter.
  • TypeSafe — short AI judgments on transcript text (for example caption emphasis, filler words and content moderation).
  • Tavus (with Daily for the call) — the Skryber AI video assistant. When you start a conversation, what you say or type to it, and your microphone audio if you turn it on, is processed to answer you. Your camera is never turned on by Skryber.
  • Persona — identity verification, only where a feature requires it.
  • UnmarkAI — removal of captions and on-screen text when you use Video Cleanup. Source videos are held by UnmarkAI for up to 1 day and results for up to 7 days; they do not use your content to train their models.
  • Stripe — payment processing.
  • Resend — transactional and support email.
  • Google — Analytics (consent-based, see §6) and the Google Drive picker if you import from Drive.
  • Pexels, Pixabay, GIPHY and Freesound — stock video, GIFs and audio you choose to add.
  • PostHog, Microsoft Clarity, the Meta Pixel and Vercel Web Analytics — product analytics, session replay, ad measurement and cookieless page counts, as described in §6.
  • Twitch — the Trending list in the import box (popular categories, live channels, and the most viewed clips and past broadcasts) is read from Twitch with Skryber's own app key, so it needs no Twitch account and tells Twitch nothing about you. It is asked for in your language, sent as a two-letter code such as en; that language and the channels and games you save there are kept in your Skryber settings, and which videos match your interests is worked out by Skryber, not Twitch. When you search for a channel there, the text you type is sent to Twitch. A video you choose to clip is downloaded into your Skryber library like any link you paste.
  • Kick — the Trending list in the import box (the most watched live streams and their categories) is read from Kick with Skryber's own app key, so it needs no Kick account and tells Kick nothing about you beyond your language, sent as a two-letter code such as en; the channels and categories you save are kept in your Skryber settings. Tapping a stream records the next 10 minutes of it into your Skryber library, like a link you paste; Past streams opens its videos on kick.com in your browser. A video or clip link you paste is downloaded into your Skryber library like any link you paste.
  • The social platforms you connect (Meta for Facebook, Instagram and Threads; Google for YouTube; TikTok; X; LinkedIn; Bluesky, and the server that hosts your Bluesky account; the Mastodon server your account is on) — the videos, captions and settings you schedule are sent to the platform you chose, only when you schedule or publish them. Nothing is sent to Twitch or Kick: Skryber only reads from them. See §4b.
  • Whop — third-party campaign marketplace (optional connection). When you connect Whop or submit to a campaign, your submission content (post URLs and caption) and identity are shared with Whop under Whop's own privacy policy. Skryber never shares your videos or transcripts with Whop.

We may also disclose information when required by law, to protect our rights or users, or in connection with a merger, acquisition, or sale of assets.

4. Links You Provide & Server-Side Processing

When you paste a video URL (e.g. a YouTube or social link), our servers fetch and download that media to process it. We only fetch public web addresses you supply for this purpose.

4b. Connected Social Accounts

You can connect Facebook Pages, Instagram business accounts, Threads, YouTube, TikTok, X, LinkedIn, Bluesky and Mastodon so Skryber can publish the posts you schedule, and Twitch and Kick so you can import your own broadcasts into Skryber (Skryber never posts to Twitch or Kick). Connecting is optional and happens only when you choose it, under the permissions shown on each platform's consent screen.

What we collect

  • OAuth access tokens and refresh tokens issued by the platform.
  • Your account id, name, handle (username) and profile picture on that platform.
  • For Meta: the ids of the Facebook Pages and Instagram business accounts you connect, and your app-scoped Facebook user id (used only to act on Meta's disconnect and deletion requests).
  • The ids and links of the posts Skryber publishes for you, and those posts' metrics (views, likes and comments).
  • For Twitch: the list of your channel's videos (past broadcasts, highlights and uploads, with their titles, links, thumbnails, lengths, dates and view counts), read when you open the import list and not stored. A video you choose to import is downloaded into your Skryber library like any link you paste.
  • For Kick: your Kick user id, username, profile picture and channel name (its address on kick.com), read when you connect and when you open Kick in the import box, so Skryber can show your channel and link to its videos and clips. Kick also returns your email address with this; Skryber does not store it. Kick does not let apps list your videos, so Skryber reads none: a video or clip you paste is downloaded into your Skryber library like any link you paste. Skryber does not post, chat, or change anything on your Kick channel.
  • For Threads: the replies to the posts you published through Skryber (each reply's id, text, username, time, link and whether it is hidden), and those posts' insights (views, likes, replies, reposts, quotes and shares).

Why we collect it

Only to publish what you schedule, to show you how those posts performed and what people replied, to reply to, like, hide or unhide comments when you ask us to, and, for Twitch, to list your videos so you can choose one to import, and for Kick, to show your channel so you can import from it. We do not read your private messages, your followers, or posts Skryber did not publish, except for the metrics and replies of posts Skryber published.

How we store it

Access and refresh tokens are encrypted at rest. Data from connected accounts is never sold, never shared with third parties except the platform you are posting to, and never used for advertising or to train AI models.

How long we keep it

Until you disconnect the account or delete your Skryber account, whichever comes first. Both delete the tokens and account details we hold for that connection. Disconnecting also revokes Skryber's access at the platform where the platform supports it. If you remove Skryber from Facebook, Instagram or Threads, Meta notifies us and we deactivate or delete the connection automatically (see our Data Deletion Instructions). For Twitch, disconnecting revokes Skryber's token at Twitch; Skryber also checks the connection with Twitch every hour, and if you removed Skryber on Twitch the connection is deactivated. For Kick, disconnecting (Settings, Import sources) revokes Skryber's access and refresh tokens at Kick and deletes the connection. Videos you already imported stay in your Skryber library until you delete them.

How to revoke access from each platform

Threads

When you connect Threads, Skryber publishes the posts you schedule to it and, for the posts you published through Skryber only:

  • reads the view and engagement insights of those posts (views, likes, replies, reposts, quotes and shares) and shows them on your Calendar and Performance pages;
  • reads the replies to those posts and shows them in the post's details on your Calendar (username, text, time and a link to the reply), or to an AI assistant you connected to Skryber when it asks;
  • hides or unhides a reply on those posts only when you ask it to, and posts the first comment you set up with Boost.

Replies are read from Threads when you open a post and are not stored by Skryber; insights are stored with that post's other metrics. Skryber does not read replies to, or insights of, posts it did not publish.

Bluesky

You connect Bluesky by signing in on the server that hosts your account (Bluesky's own, or your own server), using AT Protocol OAuth. Skryber never asks for your Bluesky password or an app password. When you connect, Skryber stores:

  • your account's DID (its permanent id), your handle, display name and avatar, read from your public Bluesky profile;
  • the sign-in session your server issued to Skryber: the access and refresh tokens, the address of your server, and the key that binds those tokens to Skryber (so they cannot be used by anyone else). All of it is encrypted at rest.

Skryber posts to your account only the posts you schedule or publish: the text of your caption (up to Bluesky's 300 characters, with its links and hashtags made clickable), and the video or images you chose, with your caption as their alt text. A video is uploaded to Bluesky's video service, which processes it and stores it with your account. Skryber then reads the public like, repost, reply, quote and save counts of those posts to show you how they did; Bluesky publishes no view counts. Skryber does not read your feed, your followers, your messages or posts it did not publish.

When you disconnect Bluesky, Skryber asks your server to revoke its session and then deletes the stored account and tokens. You can also revoke Skryber yourself from your server's account page (see above); Skryber then stops posting and asks you to reconnect.

Mastodon

Mastodon has no central company or app store: each server runs on its own. When you connect Mastodon you choose your server (for example mastodon.social) and sign in on that server's own page, using OAuth. Skryber never asks for your Mastodon password. The first time anyone connects from a server, Skryber registers itself there as an app called "Skryber" and keeps that server's app credentials (encrypted) to reuse for everyone on the same server. When you connect, Skryber stores:

  • your server's domain, your account id there, your username (shown as your full address, you@your-server), display name and avatar, read from your account;
  • the access token your server issued to Skryber, encrypted at rest, and the permissions it was granted: reading who you are, posting statuses, uploading media, and reading your own posts' counts. Some servers only offer the broader "read" and "write" permissions; Skryber still only does what is listed here;
  • your server's published limits (its character limit and media size limits), so the composer can keep your caption within them.

Skryber posts to your account only the posts you schedule or publish: your caption (cut at a word break to your server's character limit when it is longer), and the video or images you chose, with your caption (or the title) as their alt text. Posts are public. Media is uploaded to your server, which processes it before the post goes out. Skryber then reads the favourite, boost and reply counts of those posts to show you how they did; Mastodon publishes no view counts. Skryber does not read your timeline, your followers, your messages or posts it did not publish.

When you disconnect Mastodon, Skryber asks your server to revoke its access token and then deletes the stored account and token. You can also revoke Skryber yourself on your server (see above); Skryber then stops posting and asks you to reconnect.

Google and YouTube

When you connect YouTube, Skryber reads your channel id, channel name and channel picture, and the video and analytics data (such as views, likes, comments, retention and click-through rate) for the videos Skryber posted to your channel. Skryber uses this access only to upload the videos you schedule, set their thumbnails, and post the comments and likes you ask for.

Skryber's use and transfer of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.

By connecting YouTube you agree to theYouTube Terms of Service (https://www.youtube.com/t/terms); see the Google Privacy Policy (https://policies.google.com/privacy). You can revoke Skryber's access at any time atsecurity.google.com/settings/security/permissions.

If you import from Google Drive, Skryber can open only the files you pick in the Google Picker, and uses them only to import that video.

TikTok

When you connect TikTok, Skryber reads your basic profile (open id, display name and avatar) and your posting settings from TikTok's creator info (such as the privacy levels and interaction options available to your account). Skryber posts only the videos you schedule, with the privacy and interaction settings (comments, Duet, Stitch) you pick for each post. SeeTikTok's Privacy Policy.

5. Data Retention & Deletion

We retain your account and content for as long as your account is active or as needed to provide the Service. You can delete individual videos, transcripts, and clips at any time from the app, and you can request deletion of your entire account and associated data by contacting us (see §11). We may retain limited records where required for legal, tax, or fraud-prevention purposes. Disconnecting Whop deletes our stored Whop tokens. Submission records and recorded evidence URLs are retained as part of your account history — because submissions are irreversible on Whop's side, we keep the record of exactly what you authorized and sent — and are deleted with your account. Deleting your Skryber account does not delete submissions already held by Whop; contact Whop for those.

6. Cookies & Analytics

We use essential cookies that are required to sign you in and run the Service. We also use analytics tools to understand usage and improve Skryber: Google Analytics and the Meta Pixel (to measure our advertising), which load only after you accept analytics in the cookie banner, and PostHog (product analytics) and Microsoft Clarity (heatmaps and session replay, which can record how you move through pages; all page text and images are masked in those recordings). On public pages, and for guest sessions anywhere, PostHog and Clarity also wait for that accept. Inside the signed-in app, PostHog and Clarity run as part of operating the Service unless you have declined analytics. Google Analytics and the Meta Pixel never run inside the signed-in app. If you decline, the tools stop at once, their cookies are deleted, and none of them is loaded again. We also use Vercel Web Analytics, which counts page views without cookies and is skipped if you decline. Admin pages are never tracked. You can change your choice at any time from Cookie settings (also in the site footer and in your account settings).

7. Clipperverse Feed Activity

Clipperverse is Skryber's community feed. When you scroll it, we record which posts appeared on your screen, whether you watched a video past two seconds, whether it played to the end, and how long each post was visible. We use this to count views for the creator who posted, and to decide what to show you.

What we do not record: we do not log what you type, what you hover over, how long you spend reading someone's profile, or anything you do outside Clipperverse. We do not sell this data, and we do not share it with advertisers.

Other members never see your activity. A creator sees how many people viewed their post — never who, and never how long any individual watched.

You can ask us to delete your feed activity at any time using the contact details below, and deleting your account removes it along with everything else.

Personalization. Skryber uses your activity in Clipperverse (what you watch, react to, save, share, comment on and hide) and the topics you pick to personalize your Clipperverse feed and the trends we show you. Trends are also shown for the country we derive from your IP address. This profile is stored only in Skryber, is never sold or shared with advertisers, and you can see, change or reset it at any time in Settings under Your interests.

8. Your Rights (GDPR & CCPA)

Depending on where you live, you have the right to:

  • Access the personal information we hold about you and request a copy.
  • Correct or update inaccurate information.
  • Delete your account and personal data.
  • Object to or restrict certain processing, and withdraw consent (e.g. analytics) at any time. Withdrawing consent does not affect processing already carried out.
  • Receive the personal data you gave us in a structured, commonly used, machine-readable format, and ask us to transmit it to another provider where technically feasible (data portability).
  • Not be sold your personal information — we do not sell it, and we do not use it for automated decisions producing legal or similarly significant effects about you.
  • Lodge a complaint with your local data protection supervisory authority. In the EEA this is the authority for your country of residence; in the UK it is the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at the address in §11. We respond within one month, as required by the GDPR, and will tell you if we need longer for a complex request. We do not charge for these requests or make you give a reason.

9. Data Security & International Transfers

We apply appropriate technical and organizational measures — including database row-level security, encryption in transit, encryption at rest of the OAuth tokens for accounts you connect, and access controls — to protect your information. No method of transmission or storage is 100% secure.

Skryber operates from the United States, and the providers listed in §3 may process data in the United States and other countries outside the EEA and the UK. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), or on an adequacy decision where one covers the destination country. You may request a copy of the safeguards that apply to a specific transfer by contacting us at the address in §11.

10. Children's Privacy

Skryber is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Contact Us

For privacy questions or to exercise your rights, contact:

Multitude Media, LLC

Email: support@skryber.com

12. Changes to This Policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date; material changes may also be notified by email or in the app.